๐ฌ๐ง
consul.to
2026-10-28 10:08:56
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-28 09:42:47
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.93.141.122 (122.141.93.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.141.122 (122.141.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:42:42.451633 2026] [security2:error] [pid 29640:tid 29640] [client 34.93.141.122:40162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unclemaomao.org"] [uri "/.git/config"] [unique_id "auHDkmDQtlI3d2j_cJpqvgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-28 09:30:48
(1 hour ago)
540 requests with url.path *.env
111 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-28 09:18:47
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.93.141.122 (122.141.93.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.141.122 (122.141.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:18:44.096302 2026] [security2:error] [pid 30693:tid 30693] [client 34.93.141.122:59112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uncle-david.com"] [uri "/.git/config"] [unique_id "auG99IJrZiaF9AHeF3MVwAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Alpiskris
2026-10-28 06:55:19
(4 hours ago)
34.93.141.122 - - [28/Oct/2026:06:55:05 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows N ...
show more
34.93.141.122 - - [28/Oct/2026:06:55:05 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.141.122 - - [28/Oct/2026:06:55:05 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.141.122 - - [28/Oct/2026:06:55:06 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.141.122 - - [28/Oct/2026:06:55:06 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.141.122 - - [28/Oct/2026:06:55:06 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.141.122 - - [28/Oct/2026:06:5
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-28 06:44:02
(4 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-28 03:39:17
(7 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ง๐ท
dominioz
2026-10-28 03:04:42
(8 hours ago)
2026-10-28 03:04:29 GET /.env.local - - 34.93.141.122 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+Apple ...
show more
2026-10-28 03:04:29 GET /.env.local - - 34.93.141.122 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 401 229
2026-10-28 03:04:29 GET /.env.production - - 34.93.141.122 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 401 229
2026-10-28 03:04:29 GET /.env.staging - - 34.93.141.122 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 401 229
2026-10-28 03:04:30 GET /.env.development - - 34.93.141.122 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 401 229
2026-10-28 03:04:30 GET /.env.test - - 34.93.141.122 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 401 229
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-28 02:41:20
(8 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-28 02:40:02
(8 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
Anonymous
2026-10-28 02:02:34
(9 hours ago)
34.93.141.122 - - [28/Oct/2026:04:02:27 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows N ...
show more
34.93.141.122 - - [28/Oct/2026:04:02:27 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.141.122 - - [28/Oct/2026:04:02:27 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.141.122 - - [28/Oct/2026:04:02:28 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.141.122 - - [28/Oct/2026:04:02:28 +0200] "GET /.git/config HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.141.122 - - [28/Oct/2026:04:02:29 +0200] "GET /.env HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.141.122 - - [28/Oct/2026:0
...
show less
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-28 01:28:32
(9 hours ago)
[28/Oct/2026:02:33:50 +0200] -- 34.93.141.122 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more
[28/Oct/2026:02:33:50 +0200] -- 34.93.141.122 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
tutaim.com
2026-10-27 23:00:03
(12 hours ago)
โ [28/10/26] This IP has been detected performing multiple attacks on websites (638 attempts blocked ...
show more
โ [28/10/26] This IP has been detected performing multiple attacks on websites (638 attempts blocked). Potential malicious activity.
show less
Brute-Force
SSH
Web App Attack
FTP Brute-Force
๐ธ๐ช
vaia.cloud
2026-10-27 22:35:01
(12 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ช๐ธ
tutaim.com
2026-10-27 21:00:03
(14 hours ago)
โ [27/10/26] This IP has been detected performing multiple attacks on websites (638 attempts blocked ...
show more
โ [27/10/26] This IP has been detected performing multiple attacks on websites (638 attempts blocked). Potential malicious activity.
show less
Brute-Force
SSH
Web App Attack
FTP Brute-Force